Double-Free Vulnerability in Das U-Boot Affected by Crafted ext4 Filesystem
CVE-2019-13105

7.8HIGH

Key Information:

Vendor: Denx
Status: U-boot
Vendor: CVE Published:; 6 August 2019

What is CVE-2019-13105?

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 are susceptible to a double-free vulnerability that occurs when the system attempts to list files from a specially crafted ext4 filesystem. This flaw can lead to memory corruption, potentially resulting in unexpected behavior or crashes. Mitigation involves ensuring software is updated to versions that address this vulnerability and implementing strict validation measures for filesystem operations.